Keyword Velocity Tracker

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill appears to be a straightforward local analysis tool for calculating keyword publication growth, with no evidence of credential access, network exfiltration, persistence, or destructive behavior.

This looks safe for normal local use as a research-analysis helper. Before installing or running it, use a trusted Python environment, review or pin dependencies if reproducibility matters, and provide only the time-series literature data needed for the analysis.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing unpinned dependencies can produce different behavior over time if package versions change.

Why it was flagged

The dependency list is unpinned, so exact package versions are not fixed if a user chooses to install them. This is common for simple scripts but is still worth noticing for reproducibility and dependency trust.

Skill content
dataclasses
enum
numpy
Recommendation

Use a trusted Python environment and consider pinning dependency versions before repeated or production use.

What this means

The skill may run local Python code to perform the requested calculation.

Why it was flagged

The skill documents local execution of its packaged Python script. This is expected and purpose-aligned for an analysis tool, and the artifacts do not show hidden or unrelated commands.

Skill content
python -m py_compile scripts/main.py
python scripts/main.py --help
Recommendation

Run it only with intended input data and in a normal user-level environment.